Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.mft
File:                     oUygeMheRlNdkgQ4K4SXTxOwyTw.mft (raw, json)
Hash identifier:          /GbCRKSy2QuRlR5HZBTqYxY9J3SHotq0KuBptmEBiXs=
Subject key identifier:   A3:AC:D6:84:3E:B5:5D:3D:80:37:42:B3:8C:B4:35:F6:D9:45:33:D7
Authority key identifier: A1:4C:A0:78:C8:5E:46:53:5D:92:04:38:2B:84:97:4F:13:B0:C9:3C
Certificate issuer:       /CN=A91E83FE/serialNumber=A14CA078C85E46535D9204382B84974F13B0C93C
Certificate serial:       0594
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUygeMheRlNdkgQ4K4SXTxOwyTw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.mft
Manifest number:          0583
Signing time:             Sat 04 Apr 2026 23:04:09 +0000
Manifest this update:     Sat 04 Apr 2026 23:04:09 +0000
Manifest next update:     Sat 11 Apr 2026 23:04:09 +0000
Files and hashes:         1: oUygeMheRlNdkgQ4K4SXTxOwyTw.crl (hash: nTjdtMJGC0zLciK+kVpIXFqPijtdQ+1tgb8evJDA4MU=)
                          2: B90B58FCD97211ED8C2F1263C4F9AE02.roa (hash: 5d1XnWQ6pR76M6L2odGawB/ntn61DTd/opa315TiVjw=)
                          3: B9D90E00606311EE8844F941C4F9AE02.roa (hash: 9NLlN3W75sGcxpsbJYQQO4z8VLfzpHn4F0TnxLk1jJo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.crl
                          rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUygeMheRlNdkgQ4K4SXTxOwyTw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 23:04:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1428 (0x594)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E83FE, serialNumber=A14CA078C85E46535D9204382B84974F13B0C93C
        Validity
            Not Before: Apr  4 23:04:09 2026 GMT
            Not After : Apr 11 23:04:09 2026 GMT
        Subject: CN=69d198e9-47bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d4:13:96:1f:da:9d:56:ed:37:6c:b1:97:e4:
                    4f:87:e1:88:7e:6e:99:2c:72:7c:0d:69:62:a5:a8:
                    40:9f:a0:ba:e0:55:5e:fa:c3:a9:c8:9b:e4:12:68:
                    99:1d:74:bd:c7:1b:f9:67:3c:aa:b6:7b:f0:f4:0e:
                    28:45:87:bb:e7:2e:e0:32:dc:36:a0:1a:3c:83:52:
                    6e:b7:dd:e3:a5:30:a8:3d:1d:99:0f:47:4f:5e:58:
                    a2:72:cb:82:17:4a:20:7a:c7:10:3a:f4:f4:53:76:
                    82:e5:58:1e:a5:f6:92:16:c9:c1:9a:fa:ce:9b:d8:
                    02:2c:52:9a:d1:1c:7a:d0:6c:e1:7c:97:18:6a:d8:
                    24:7d:ab:57:2f:99:d1:2a:09:2c:f0:17:c4:96:22:
                    46:7f:98:5f:f7:1f:2a:6c:9f:a8:42:d5:ee:e2:1a:
                    37:b6:57:c2:b8:4e:5f:fe:03:5c:89:ef:0b:c9:73:
                    30:fe:fd:f6:8c:e9:b4:24:1d:c8:20:c5:eb:a3:fa:
                    f9:e1:48:ca:d4:51:2b:26:78:1c:9c:1d:fe:e1:a4:
                    b3:b6:8b:a6:8c:de:65:36:76:2b:05:d9:a9:71:e4:
                    6f:1a:05:45:02:7e:a7:62:b3:1b:8d:c3:ce:0e:78:
                    e4:dc:47:bb:7b:ca:57:cc:83:b2:47:2e:b6:b7:e5:
                    d9:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:AC:D6:84:3E:B5:5D:3D:80:37:42:B3:8C:B4:35:F6:D9:45:33:D7
            X509v3 Authority Key Identifier:
                keyid:A1:4C:A0:78:C8:5E:46:53:5D:92:04:38:2B:84:97:4F:13:B0:C9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUygeMheRlNdkgQ4K4SXTxOwyTw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:02:e7:3d:b6:e7:bd:2c:eb:c6:86:f1:7a:3e:dd:b4:f0:06:
         21:54:04:aa:12:06:7d:01:e2:9e:3c:93:f2:93:c6:31:44:2e:
         6b:28:90:a2:2a:a3:61:5a:93:5a:ef:ff:12:82:57:52:07:99:
         bb:95:fa:39:9d:a2:62:8b:b9:4e:20:ff:72:f7:ec:14:fa:31:
         09:f3:af:78:24:79:7d:9a:7b:65:6a:77:44:0b:2e:d6:dc:26:
         38:6d:0d:9a:98:9c:6b:fe:27:b3:d1:86:43:45:bb:11:1d:9a:
         41:c4:77:58:78:4f:b5:aa:27:94:01:76:8c:ff:1c:e5:65:e8:
         35:b3:33:ac:36:f9:af:38:f7:59:01:76:71:69:cc:db:1d:9a:
         ee:31:69:13:ab:0e:5e:63:0d:05:ed:30:4c:0c:51:b4:ee:76:
         4e:82:36:1b:40:0a:0e:91:b3:ea:b0:4c:0e:fe:26:d6:24:90:
         9d:6c:fb:88:12:9a:73:50:f0:32:41:80:3c:a9:52:c3:a8:ee:
         c0:26:b0:26:34:99:89:46:0f:64:3f:c0:9f:c6:4c:33:13:75:
         4e:35:2f:7c:74:34:75:87:40:3f:4e:b7:a6:42:ed:d1:35:90:
         da:43:05:85:8f:0d:2b:00:5d:5c:43:34:54:bf:75:fa:44:0b:
         37:30:51:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:51:36 2026 by rpki-client